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This paper presents a new combined pointer and escape analysis for nnultithreaded 
programs. The algorithm uses a new abstraction called parallel interaction graphs to 
analyze the interactions between threads and extract precise polnts-to, escape, and 
action ordering information for objects accessed by multiple threads. The analysis is 
compositional, analyzing each method or thread once to extract a parameterized analysis 
result that can be specialized for use In any context. ... 

Incrementalized pointer and escape analysis 
Frederic Vivien, Martin Rinard 

May 2001 ACM SIGPLAN Notices , Proceedings of the ACM SIGPLAN 2001 conference 

on Programming language design and implementation PLDI '01, volume 36 
Issue 5 
Publisher: ACM Press 

Additional Information: full citation , abstract , references , citing s, index 
terms 



Full text available: 



We present a new pointer and escape analysis. Instead of analyzing the whole program, 
the algorithm incrementally analyzes only those parts of the program that may deliver 
useful results. An analysis policy monitors the analysis results to direct the incremental 
investment of analysis resources to those parts of the program that offer the highest 
expected optimization return. 

Our experimental results show that almost all of the objects are allocated at a small 
number of allocation sit ... 



Compositional pointer and escape analysis for Java programs 
John Whaley, Martin Rinard 

October 1999 ACI^ SIGPLAN Notices , Proceedings of the 14th ACM SIGPLAN 

conference on Object-oriented programming, systems, languages, and 
applications OOPSLA '99, Volume 34 issue 10 
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This paper presents a combined pointer and escape analysis algorithm for Java programs. 
The algorithm is based on the abstraction of points-to escape graphs, which characterize 
how local variables and fields in objects refer to other objects. Each points-to escape 
graph also contains escape information, which characterizes how objects allocated In one 
region of the program can escape to be accessed by another region. The algorithm is 
designed to analyze arbitrary regions of complete or inco ... 

Escape analysis for object-oriented languages: application to Java 
Bruno Blanchet 

October 1999 ACM SIGPLAN Notices , Proceedings of the 14th ACM SIGPLAN 

conference on Object-oriented programming, systems, languages, and 
applications OOPSLA '99, Volume 34 issue 10 
Publisher: ACM Press 

Full text available: j g l pdf(1.73 MB) Additional Information: full citation , abstract , references , citings, index 
^ terms 

Escape analysis [27, 14, 5] is a static analysis that determines whether the lifetime of 
data exceeds its static scope. The main originality of our escape analysis is that it 
determines precisely the effect of assignments, which is necessary to apply it to object 
oriented languages with promising results, whereas previous work [27, 14, 5] applied it to 
functional languages and were very imprecise on assignments. Our implementation 
analyses the full Java^" Language. ... 

Escape analysis for Java 

Jong-Deok Choi, Manish Gupta, Mauricio Serrano, Vugranam C. Sreedhar, Sam Midklff 
October 1999 ACM SIGPLAN Notices , Proceedings of the 14th ACM SIGPLAN 

conference on Object-oriented programming, systems, languages, and 
applications OOPSLA '99, Volume 34 Issue 10 
Publisher: ACM Press 

Full text available* pdf(1 85 MB) Additional Information: full citation , abstract , references, citings , index 

* ^ terms 

This paper presents a simple and efficient data flow algorithm for escape analysis of 
objects in Java programs to determine (i) if an object can be allocated on the stack; (ii) if 
an object is accessed only by a single thread during its lifetime, so that synchronization 
operations on that object can be removed. We introduce a new program abstraction for 
escape analysis, the connection graph, that is used to establish reachability relationships 
between objects and object ref ... 
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>^ July 1992 ACM SIGPLAN Notices , Proceedings of the ACM SIGPLAN 1992 conference 
on Programming language design and Implementation PLDI '92, Volume 27 

Issue 7 
Publisher: ACM Press 

Full text available: K|j)df(1 .08 MB). Additional Information: full citation , abstract , references , citings , index 
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Higher order functional programs constantly allocate objects dynamically. These objects 
are typically cons cells, closures, and records and are generally allocated in the heap and 
reclaimed later by some garbage collection process. This paper describes a compile time 
analysis, called escape analysis, for determining the lifetime of dynamically created 
objects in higher order functional programs, and describes optimizations that can be 
performed, based on the analysis, to improve storage all ... 
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® Stack allocation and synchronization optimizations for Java using escape analysis 
^ Jong-Deok Choi, Manish Gupta, Mauricio J. Serrano, Vugranam C. Sreedhar, Samuel P. 
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November 2003 ACM Transactions on Programming Languages and Systems 

(TOPLAS), Volume 25 Issue 6 
Publisher: ACM Press 

Full text available* fi3 pdf(632 8 5 KB) Additional Information: full citation , abstract , references , citings , index 

terms , review 

This article presents an escape analysis framework for Java to determine (1) if an object 
is not reachable after its method of creation returns, allowing the object to be allocated 
on the stack, and (2) if an object Is reachable only from a single thread during its lifetime, 
allowing unnecessary synchronization operations on that object to be removed. We 
introduce a new program abstraction for escape analysis, the connection grapf), that is 
used to establish reachability relationshi ... 

Keywords: Connection graphs, escape analysis, points-to graph 

^ Escape analysis for JavaiM; Theory and practice 
Bruno Blanchet 

November 2003 ACM Transactions on Programming Languages and Systems 

(TOPLAS), Volume 25 Issue 6 
Publisher: ACM Press 

Full text available 1 ?| pdf(684 21 KB) Additional Information: full citation, abstract , references, citings , index 

terms , review 

Escape analysis is a static analysis that determines whether the lifetime of data may 
exceed its static scope.This paper first presents the design and correctness proof of an 
escape analysis for Java*^". This analysis Is interprocedural, context sensitive, and as flow- 
sensitive as the static single assignment form. So, assignments to object fields are 
analyzed in a flow-insensitive manner. Since Java is an imperative language, the effect of 
assignments must be precisely determined. Thi ... 

Keywords: Java, optimization, stack allocation, static analysis, synchronization 
elimination 



D ynamic compilation techniques: Escape analysis in the context of dynamic 
compilation and deoptimization 
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June 2005 Proceedings of the 1st ACM/USENIX international conference on Virtual 
execution environments 
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In object-oriented progrannming languages, an object Is said to escape the method or 
thread in which it was created If it can also be accessed by other methods or threads. 
Knowing which objects do not escape allows a compiler to perform aggressive 
optimlzationsThis paper presents a new Intraprocedural and interprocedural algorithm for 
escape analysis in the context of dynamic compilation where the compiler has to cope 
with dynamic class loading and deoptimization. It was implemented for S ... 

Keywords: Java, deoptimization, escape analysis, just-in-time compilation, optimization, 
scalar replacement, stack allocation, synchronization removal 



Escape analysis: correctness proof, implementation and experimental results 
Bruno Blanchet 

January 1998 Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on 
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12 Field analy sis: gettin g useful and low-cost interprocedural information 
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>^ May 2000 ACM SIGPLAN Notices , Proceedings of the ACM SIGPLAN 2000 conference 
on Programming language design and implementation PLDI *00, Volume 35 

Issue 5 
Publisher: ACM Press 
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We present a new limited form of interprocedural analysis called field analysis that can be 
used by a compiler to reduce the costs of modern language features such as object- 
oriented programming, automatic memory management, and run-time checks required 
for type safety. Unlike many previous interprocedural analyses, our analysis is cheap, and 
does not require access to the entire program. Field analysis exploits the declared access 
restrictions placed on fields In a modul ... 
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Access control analysis: Data-centric security: role analysis and role tvpestates 
Vugranam C. Sreedhar 

June 2006 Proceedings of the eleventh ACI^ symposium on Access control models 
and technologies SACMAT '06 

Publisher: ACM Press 

Full text available: ^lj3df(2m_98JKB). Additional Information: full citation , abstract , references, index terms 

In J2EE and .NET roles are assigned to methods using external configuration files, called 
the deployment descriptors. Assigning roles to methods, although conceptually simple, in 
practice it is quite complicated. For instance, in order for a deployer to assign a role rto a 
method m, the deployer must understand the set of roles R that are assigned to each 
method n that can be invoked directly or indirectly from m, and that r has to be 
"consistently" ass ... 

Keywords: RBAC, role analysis, role escape analysis, role typestates 
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Full text available fil pdf(277 65 KB) A^^^*'^"^* Information: full citation , abstract , references , citings , index 

• ]A| terms 

We present an interprocedural and conriposltlonal algorithm for finding pairs of compatible 
allocation sites, which have the property that no object allocated at one site is live at the 
same time as any object allocated at the other site. If an allocation site is compatible with 
itself, it is said to be unitary: at most one object allocated at that site is live at any given 
point in the, execution of the program. We use the results of the analysis to statically 
preallocate memory spa ... 

Keywords: interprocedural analysis, memory preallocatlon, static analysis 



Cloning-based context-sensitive pointer alias analysis using binary decision diagrams 
^ John Whaley, Monica S. Lam 

>^ June 2004 ACM SIGPLAN Notices , Proceedings of the ACM SIGPLAN 2004 conference 
on Programming language design and implementation PLDI '04, volume 39 

Issue 6 
Publisher: ACM Press 

Full text available- pdf(277 87 KB) Additional Information: full citation , abstract , references , citings , index 
^ terms 

This paper presents the first scalable context-sensitive, inclusion-based pointer alias 
analysis for Java programs. Our approach to context sensitivity is to create a clone of a 
method for every context of interest, and run a context-insensitive algorithm over the 
expanded call graph to get context-sensitive results. For precision, we generate a clone 
for every acyclic path through a program's call graph, treating methods in a strongly 
connected component as a single node. Normally ... 

Keywords: Datalog, Java, binary decision diagrams, cloning, context-sensitive, inclusion- 
based, logic programming, pointer analysis, program analysis, scalable 



On the complexity of set-based analysis 

Nevin Heintze, David McAllester 

August 1997 ACM SIGPLAN Notices , Proceedings of the second ACM SIGPLAN 

international conference on Functional programming ICFP '9 7, Volume 32 
Issue 8 
Publisher: ACM Press 

Full text available: ^ pdf(1.31 MB) Additional Information: full citation , abstract , references , index terms 

We define a general notion of set-based analysis — any language whose operational 
semantics is defined by environment evaluation has a well defined set-based abstraction. 
This general definition covers both Aiken and Wimmers* type system and Heintze' set- 
based analysis. Aiken and Wimmers give a nondeterministic exponential time algorithm 
for their analysis. Heintze gives an 0{n^) procedure. We show that this discrepancy is due 
to the complexity of the case statements a ... 
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A compiler for multi -threaded object-oriented programs needs information about the 
sharing of objects for a variety of reasons: to implement optimizations, to issue warnings, 
to add instrumentation to detect access violations that occur at runtime. An Object Use 
Graph (OUG) statically captures accesses from different threads to objects. An OUG 
extends the Heap Shape Graph (HSG), which is a compile-time abstraction for runtime 
objects (nodes) and their reference relations (edges). An OUG specifie ... 

Keywords: heap shape graph, object use graph, program analysis, race detection, 
representations for concurrent programs 



High-level data flow analysis 
Barry K. Rosen 

>^ October 1977 Communications of the ACM, Volume 20 issue lO 
Publisher: ACM Press 

Full text available: "glpdf d.lS MB ) Additional Information: full citation , abstract , references , citing s 

In contrast to the predominant use of low-level intermediate text, high-level data flow 
analysis deals with programs essentially at source level and exploits the control flow 
information implicit in the parse tree. The need for high-level flow analysis arises from 
several aspects of recent work on advanced methods of program certification and 
optimization. This paper proposes a simple general method of high-level data flow 
analysis that allows free use of escape and jump statements, avoids ... 

Keywords: control flow graph, data flow analysis, escapes, exits, goto statements, high- 
level language, jumps, structured programming 
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January 2002 ACM SIGPLAN Notices , Proceedings of the 29th ACM SIGPLAN-SIGACT 

symposium on Principles of programming languages POPL '02, volume 37 
Issue 1 
Publisher: ACM Press 

Full text available:^ pdf(225. 18 KB) Additional Information: full citation , abstract , references , citing s 

It is an important criterion of program correctness that a program accesses resources in a 
valid manner. For example, a memory region that has been allocated should be 
eventually deallocated, "and after the deallocation, the region should no longer be 
accessed. A file that has been opened should be eventually closed. So far, most of the 
methods to analyze this kind of property have been proposed in rather specific contexts 
(like studies of memory management and verification of usage of lock primi ... 

^° A classification system and analysis for aspect-oriented pro g rams 
Martin Rinard, Alexandru Salcianu, Suhabe Bugrara 

October 2004 ACM SIGSOFT Software Engineering Notes , Proceedings of the 12th 
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Publisher: ACM Press 

Full text available- 4g| pdf(247 39 KB) A^^'^'O"^' Information: full citation , abstract , references , citing s, index 

We present a new classification system for aspect-oriented programs. This system 
characterizes the interactions between aspects and methods and identifies classes of 
interactions that enable modular reasoning about the crosscut program. We argue that 
this system can help developers structure their understanding of aspect-oriented 
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programs and promotes their ability to reason productively about the consequences of 
crosscutting a program with a given aspect. 

We have designed and implemen ... 

Keywords: aspect oriented programming, program analysis 
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